Security

Malware Analysis – evasion – 87ceb689085b13058f52f9a3ca4c57c4

May 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 87ceb689085b13058f52f9a3ca4c57c4SHA1: 5853baa293b0eba6b53dfed58c51d623db63dcc5ANALYSIS DATE: 2023-05-01T15:35:22ZTTPS: T1082, T1088, T1089, T1112, T1060, T1004,...

Malware Analysis – evasion – c66005f39c6e09076309c264b01ad6e1

May 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: c66005f39c6e09076309c264b01ad6e1SHA1: ff51cbab28fa4d0d0d7ad83fb39ea7e606165454ANALYSIS DATE: 2023-05-01T15:36:23ZTTPS: T1082, T1158, T1112, T1005, T1081, T1060,...

Malware Analysis – evasion – b7c0024b209a95c956b2594bfa4c9794

May 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: b7c0024b209a95c956b2594bfa4c9794SHA1: 43ac0e46b87ef21d9c75623da25f14b1ebf12f1aANALYSIS DATE: 2023-05-01T15:36:13ZTTPS: T1112, T1158, T1088, T1089, T1082, T1005,...

Malware Analysis – evasion – d093e0cbc91db4411c651c57efa51da1

May 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: d093e0cbc91db4411c651c57efa51da1SHA1: 1c60d3d5e5252f2bd6278d4abab89e5d2234430eANALYSIS DATE: 2023-05-01T15:36:27ZTTPS: T1112, T1158, T1088, T1089, T1082, T1005,...

Malware Analysis – chaos – d7d20a9d74a3f0b5b0b98de937ebbf85

May 1, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:neshta, persistence, ransomware, spyware, stealerMD5: d7d20a9d74a3f0b5b0b98de937ebbf85SHA1: 36c23f830785e2b2012295f223e9bb262b97df63ANALYSIS DATE: 2023-05-01T15:36:29ZTTPS: T1005, T1081, T1082, T1112, T1042 ScoreMeaningExample10Known...

Malware Analysis – evasion – eb177e9c0d163077b0bace23db611d13

May 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: eb177e9c0d163077b0bace23db611d13SHA1: 60b0d732c31179add3fdec2d425c0670dd8a6a5cANALYSIS DATE: 2023-05-01T15:36:41ZTTPS: T1060, T1112, T1158, T1088, T1089, T1082,...

Malware Analysis – evasion – e9815454c5f2745c9720c2111d71a0e4

May 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: e9815454c5f2745c9720c2111d71a0e4SHA1: bf012c6e3f751c16f12ae9b24296112ea212f8c2ANALYSIS DATE: 2023-05-01T15:36:40ZTTPS: T1112, T1158, T1088, T1089, T1082, T1005,...

Malware Analysis – evasion – e96bce766e53248352db1a095e857cd4

May 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: e96bce766e53248352db1a095e857cd4SHA1: c8d68433485db191e2acb6797da513cfb7e67b77ANALYSIS DATE: 2023-05-01T15:36:39ZTTPS: T1158, T1112, T1082, T1005, T1081, T1060,...

Malware Analysis – evasion – eb9579b8efcc9815f8646034de7c7b52

May 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: eb9579b8efcc9815f8646034de7c7b52SHA1: a3bbc9da1216f3e625135f3ea2841501af554e0bANALYSIS DATE: 2023-05-01T15:36:42ZTTPS: T1112, T1158, T1082, T1060, T1005, T1081,...

Malware Analysis – djvu – eddd5c93492dff3e1e6d97ef6e7a59c5

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: eddd5c93492dff3e1e6d97ef6e7a59c5SHA1: b213dc4815386848f86d2495d6538c73af3f9b2fANALYSIS DATE: 2023-05-01T15:39:05ZTTPS: T1060, T1112, T1082, T1222, T1130 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – bbf0b55abc4ca7fc1b9c4c466e0271e5

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: bbf0b55abc4ca7fc1b9c4c466e0271e5SHA1: 0f0680fad457aa95f22f9e10733ba9a4e217cf19ANALYSIS DATE: 2023-05-01T15:36:57ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – ffc9b11fc8dea0432f634a37f4b05e42

May 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: ffc9b11fc8dea0432f634a37f4b05e42SHA1: e0fc237a8f07c11cf167082bd1eb3ffe9c4f8befANALYSIS DATE: 2023-05-01T15:36:48ZTTPS: T1060, T1112, T1004, T1005, T1081, T1082,...

Malware Analysis – djvu – 3a0628ca92a53ea743425b649ba5aa6a

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 3a0628ca92a53ea743425b649ba5aa6aSHA1: e1a746348444f00e7264cca886eac961c510aabfANALYSIS DATE: 2023-05-01T15:37:16ZTTPS: T1082, T1053, T1130, T1112, T1060,...

Malware Analysis – djvu – 6f8b2a01252f20aced3db0ac9d1bc33f

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 6f8b2a01252f20aced3db0ac9d1bc33fSHA1: 0e680bf1b3fb7fd592117923e5b879b2787ec423ANALYSIS DATE: 2023-05-01T15:41:59ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – djvu – ddeba64a187a464314b0613399b99335

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: ddeba64a187a464314b0613399b99335SHA1: 16607f7e859454184b15f3835372c15cd39c7051ANALYSIS DATE: 2023-05-01T15:41:03ZTTPS: T1060, T1112, T1222, T1082, T1130,...

Malware Analysis – smokeloader – 036f9407ef3f17bca4e0e9f815abdbf5

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 036f9407ef3f17bca4e0e9f815abdbf5SHA1: e0a3dd78d675cfda0d5c7bcb21ca0d1b82d7db55ANALYSIS DATE: 2023-05-01T15:40:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 708877b85f81dc9829698558989b6f3f

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 708877b85f81dc9829698558989b6f3fSHA1: fc75dcb59a71505e086bd900a0acb3041a5c1a60ANALYSIS DATE: 2023-05-01T15:39:17ZTTPS: T1060, T1112, T1222, T1082, T1053, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 7199bce083f5362ac8b5d5676e823fc6

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 7199bce083f5362ac8b5d5676e823fc6SHA1: ba7ec51abd51efbefecbb6908ae07c19afa0e53fANALYSIS DATE: 2023-05-01T15:44:26ZTTPS: T1060, T1112, T1222, T1082, T1130,...

Malware Analysis – smokeloader – c3de2bee9d934526001ac3ed817b2e3c

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c3de2bee9d934526001ac3ed817b2e3cSHA1: 0abff21d42f7033f8cd9bbcb4a70ebe756cfdc1eANALYSIS DATE: 2023-05-01T15:45:22ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e52e8f7e2524b9606fa8afefddcfa78a

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: e52e8f7e2524b9606fa8afefddcfa78aSHA1: 03a537274f88f917422a2cdf1f07f10fcdbbaff9ANALYSIS DATE: 2023-05-01T15:42:45ZTTPS: T1053, T1060, T1112, T1222, T1082,...

Malware Analysis – smokeloader – d36ccecb23e19ad530e3944d2e74a112

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d36ccecb23e19ad530e3944d2e74a112SHA1: bc23ecf37f5732eceb6afc61412f3c604209bccaANALYSIS DATE: 2023-05-01T15:43:19ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a49d680bedab3de4a399797626b8fe33

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a49d680bedab3de4a399797626b8fe33SHA1: b1031e232efa0715968c4c4ff2d244906e38cf4bANALYSIS DATE: 2023-05-01T15:48:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 3cb28e804cc2dab7c94f96bd7a95d45f

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3cb28e804cc2dab7c94f96bd7a95d45fSHA1: e5303d9431ba2bbc2d2cb07ab5253a6fb0a1aa89ANALYSIS DATE: 2023-05-01T15:47:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0d54474c200d1ecddc41c0a860ca8d88

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0d54474c200d1ecddc41c0a860ca8d88SHA1: ed8280821fe7cecd68301f36bf4f26058443c8f7ANALYSIS DATE: 2023-05-01T15:47:25ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – evasion – 87ceb689085b13058f52f9a3ca4c57c4

Malware Analysis – evasion – c66005f39c6e09076309c264b01ad6e1

Malware Analysis – evasion – b7c0024b209a95c956b2594bfa4c9794

Malware Analysis – evasion – d093e0cbc91db4411c651c57efa51da1

Malware Analysis – chaos – d7d20a9d74a3f0b5b0b98de937ebbf85

Malware Analysis – evasion – eb177e9c0d163077b0bace23db611d13

Malware Analysis – evasion – e9815454c5f2745c9720c2111d71a0e4

Malware Analysis – evasion – e96bce766e53248352db1a095e857cd4

Malware Analysis – evasion – eb9579b8efcc9815f8646034de7c7b52

Malware Analysis – djvu – eddd5c93492dff3e1e6d97ef6e7a59c5

Malware Analysis – smokeloader – bbf0b55abc4ca7fc1b9c4c466e0271e5

Malware Analysis – evasion – ffc9b11fc8dea0432f634a37f4b05e42

Malware Analysis – djvu – 3a0628ca92a53ea743425b649ba5aa6a

Malware Analysis – djvu – 6f8b2a01252f20aced3db0ac9d1bc33f

Malware Analysis – djvu – ddeba64a187a464314b0613399b99335

Malware Analysis – smokeloader – 036f9407ef3f17bca4e0e9f815abdbf5

Malware Analysis – djvu – 708877b85f81dc9829698558989b6f3f

Malware Analysis – djvu – 7199bce083f5362ac8b5d5676e823fc6

Malware Analysis – smokeloader – c3de2bee9d934526001ac3ed817b2e3c

Malware Analysis – djvu – e52e8f7e2524b9606fa8afefddcfa78a

Malware Analysis – smokeloader – d36ccecb23e19ad530e3944d2e74a112

Malware Analysis – smokeloader – a49d680bedab3de4a399797626b8fe33

Malware Analysis – smokeloader – 3cb28e804cc2dab7c94f96bd7a95d45f

Malware Analysis – smokeloader – 0d54474c200d1ecddc41c0a860ca8d88

[DEVMAN] – Ransomware Victim: mceicl[.]com

Cobalt Strike Beacon Detected – 165[.]154[.]125[.]212:8080

Cobalt Strike Beacon Detected – 154[.]201[.]74[.]112:8080

Cobalt Strike Beacon Detected – 81[.]70[.]255[.]195:8080

Cobalt Strike Beacon Detected – 8[.]153[.]205[.]30:8080

You may have missed